Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/1d0e44a4-31c0-366d-a921-972bf9bff538.roa
File:                     1d0e44a4-31c0-366d-a921-972bf9bff538.roa (raw, json)
Hash identifier:          TOr6CH05TNXENJS5ydlMHZeBKG87lx9FwwXlYzEG4Ec=
Subject key identifier:   F9:2B:3A:47:C1:3C:3A:88:44:77:1B:F5:BC:3E:52:4B:2F:6B:AE:86
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285845E193C44C030F1EC0A169B280
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/1d0e44a4-31c0-366d-a921-972bf9bff538.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32554
IP address blocks:        2607:6b40:4200::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 17:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c4:4c:03:0f:1e:c0:a1:69:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=3190193e-80f6-4a30-9f25-38150fb1c979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:e5:54:41:46:5a:12:d6:c4:59:a4:8f:0d:
                    f9:3c:1b:f0:9a:71:1e:37:60:75:85:5b:e2:d4:95:
                    51:b0:f4:58:fa:8a:99:2e:1d:ea:5c:08:91:cd:09:
                    1e:68:7b:05:fc:f6:60:9e:fa:f2:6f:3b:9c:e0:cd:
                    8f:75:8d:10:fd:d2:5b:40:45:56:0e:d7:c8:a1:9b:
                    ba:92:14:71:49:0e:f7:aa:68:ac:c2:59:91:fc:17:
                    ff:9e:fc:fc:22:55:6a:8f:12:7c:f1:c2:05:31:6b:
                    2e:69:2a:7e:49:f6:37:1f:9c:94:2f:53:d1:81:96:
                    83:7c:34:ea:b4:f0:4d:42:9f:6d:01:90:09:57:ad:
                    16:6e:ce:f2:7a:a0:f4:47:bb:6f:3b:8a:e5:e6:78:
                    b6:9f:62:af:c3:45:c0:69:9c:e3:41:4c:f0:a0:b7:
                    e3:7d:a5:be:67:0d:6a:3e:14:88:ab:63:4c:87:18:
                    23:48:73:fa:72:52:85:bd:75:92:a4:31:3b:42:85:
                    95:01:5e:fe:8e:c1:84:89:45:f1:2e:f5:3f:1d:71:
                    b0:7a:82:0c:c8:9b:02:58:89:03:53:99:b9:7f:81:
                    9e:62:58:c6:f4:72:40:0f:6d:dd:cc:ea:77:15:fb:
                    55:81:d4:47:7d:38:2a:11:f4:4f:6d:22:df:31:15:
                    5b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2B:3A:47:C1:3C:3A:88:44:77:1B:F5:BC:3E:52:4B:2F:6B:AE:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/1d0e44a4-31c0-366d-a921-972bf9bff538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40:4200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:ca:ce:a8:c5:4d:ac:7a:96:8d:d2:e2:08:41:db:40:e4:
         30:09:00:42:ed:ed:aa:6b:37:da:d6:a7:65:04:a2:a5:6b:ea:
         e5:65:f1:5d:f3:33:40:a2:7b:e3:63:95:40:48:20:3e:72:75:
         eb:0a:08:ba:48:6e:23:ac:a6:bf:11:a1:55:1a:18:42:15:80:
         e2:b8:63:65:1f:7e:33:5b:30:4c:92:c3:84:d0:3a:87:04:f6:
         a5:4e:cd:76:3e:2b:1a:3d:85:f1:39:4e:a9:e0:b9:79:37:04:
         3d:5a:32:d3:0c:9b:65:e7:88:99:cb:2d:1d:e9:33:e7:8e:76:
         b4:20:43:52:ba:11:f8:a2:74:cf:6c:71:3e:58:5e:82:3d:67:
         b8:6f:91:26:f0:93:69:f1:98:14:c4:b7:16:60:f8:da:28:30:
         2c:a7:f0:d9:d0:80:ac:f9:2f:ff:63:c7:71:18:1e:2b:00:a1:
         43:64:61:e8:dc:92:ef:bd:ca:42:0b:4a:c5:04:51:cc:4c:fd:
         c5:d0:3e:01:65:37:af:76:b7:be:1d:08:13:c1:26:e0:02:c1:
         ce:e4:4d:79:c9:1b:bc:79:03:2e:27:3e:68:13:20:cf:93:3b:
         cf:d3:34:9f:e4:be:ea:67:72:47:db:e2:fb:12:2b:6a:ca:1b:
         5c:c0:ea:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----